在NodeJS中使用npm包实现JS代码混淆加密

代码混淆加密"/>

在NodeJS中使用npm包实现JS代码混淆加密

使用npm包，在NodeJS中实现JS代码混淆加密

在前后端JS开发过程中，JS代码保护（JS代码混淆加密）是非常重要的一环。

JShaman是一个云端的代码保护Saas平台，可以对JS代码进行混淆、加密、压缩等操作，从而增强JS代码的安全性。同时，JShaman还有更方便易用的npm包，方便开发人员通过调用接口的方式，快速完成JS代码混淆加密。

从npm网站，可以找到名为jshaman-javascript-obfuscator的包，如下图所示：

这里有对它的使用说明，如在Nodejs环境中的安装方法，调用例程，等。

安装

npm install jshaman-javascript-obfuscator

使用

NodeJS例程代码如下所示。

//JShaman JavaScript Obfuscator Web API Interface
var jshaman_javascript_obfuscator = require("jshaman-javascript-obfuscator");//JavaScript Code to be obfuscated
var javascript_code = `function NewObject(prefix){var count=0;this.SayHello=function(msg){count++;alert(prefix+msg);}this.GetCount=function(){return count;}}var obj=new NewObject("Message : ");obj.SayHello("You are welcome.");
`;//Options. 
//Please refer to the official website of JShaman in English for relevant instructions.
///
var options = {"part_variable_identifier_obfuscate": 1,"global_variable_identifier_obfuscate": 0,"part_function_identifier_obfuscate":0,"global_function_identifier_obfuscate": 0,"member_expression_encode": 1,"numberic_literal_encode": 1,"binary_express_obfuscate": 1,"boolean_encode": 1,"json_encode":1,"regexp_encode":1,"string_unicode_encode": 1,"assignment_junk_code":1,"zombie_code": 1,"eval_encode": 1,"control_flow": 1,"string_reverse": 1,"comma_operator": 1,"string_array": 0,"string_array_encode": 0,"vm_execute": 0,"ast_execute": 0,"no_beautifier": 0,"tamper_proof": 0,"comments": 0,"compress": 1,"reserved_word": ["jshaman","w2sfot"]
}//Secret key,Obtained from the JShaman official website. 
//If not yet obtained, it can be set to free
var secret_key = "free";
var obfuscated_result = jshaman_javascript_obfuscator(javascript_code, options, secret_key);//Obfuscation result,
//if "state" is 0 it means successful and the "content" is the obfuscated JavaScript code.
//Otherwise,if there is an error,the "message" will contain an error prompt message.
console.log(obfuscated_result.state, obfuscated_result.message, obfuscated_result.content);

代码说明

调用JShaman接口，传入js代码、配置即可，非常简单。

上面的代码中，javascript_code变量是要保护的JS代码，options 变量是参数，参数中各项目的含义，可以参考JShaman官网的说明，值设为1表示启用、设为0表示不启用，secret_key是接口密钥，设为free是免费使用，商业的密钥可以从JShaman官网获得。

加密效果

上面例程中的JS代码，保护后生成的加密JS代码如下所示。

//Obfuscted javascript code
/*
var _0xce7d8a = ["117.", "92.103.98.103.102.126.103.41.72.90.93.41.125.112.121.108.51.", "117.", "117."];function _0x57d18d(_4, _5) {_5 = 9;var _,_2,_3 = "";_2 = _4.split(".");for (_ = 0; _ < _2.length - 1; _++) {_3 += String.fromCharCode(_2[_] ^ _5);}return _3;
}var visitors = {File(node, scope) {ast_excute(node['\x70\x72\x6f\x67\x72\x61\x6d'], scope);},Program(program, scope) {for (i = function () {return eval(String.fromCharCode(57, 48, 53, 49, 49, 53, 32, 94, 32, 57, 48, 53, 49, 49, 53));}(); eval(String.fromCharCode(105, 32, 60, 32, 112, 114, 111, 103, 114, 97, 109, 91, 39, 92, 120, 54, 50, 92, 120, 54, 102, 92, 120, 54, 52, 92, 120, 55, 57, 39, 93, 91, 39, 92, 120, 54, 99, 92, 120, 54, 53, 92, 120, 54, 101, 92, 120, 54, 55, 92, 120, 55, 52, 92, 120, 54, 56, 39, 93)); eval(String.fromCharCode(105, 43, 43))) {ast_excute(program['\x62\x6f\x64\x79'][i], scope);}},ExpressionStatement(node, scope) {return ast_excute(node['\x65\x78\x70\x72\x65\x73\x73\x69\x6f\x6e'], scope);},CallExpression(node, scope) {var func = ast_excute(node['\x63\x61\x6c\x6c\x65\x65'], scope);var args = node['\x61\x72\x67\x75\x6d\x65\x6e\x74\x73']['\x6d\x61\x70'](function (arg) {return ast_excute(arg, scope);});var value;if (eval(String.fromCharCode(110, 111, 100, 101, 91, 39, 92, 120, 54, 51, 92, 120, 54, 49, 92, 120, 54, 99, 92, 120, 54, 99, 92, 120, 54, 53, 92, 120, 54, 53, 39, 93, 91, 39, 92, 120, 55, 52, 92, 120, 55, 57, 92, 120, 55, 48, 92, 120, 54, 53, 39, 93, 32, 61, 61, 61, 32, 39, 77, 101, 109, 98, 101, 114, 69, 120, 112, 114, 101, 115, 115, 105, 111, 110, 39))) {value = ast_excute(node['\x63\x61\x6c\x6c\x65\x65']['\x6f\x62\x6a\x65\x63\x74'], scope);}return func['\x61\x70\x70\x6c\x79'](value, args);},MemberExpression(node, scope) {var obj = ast_excute(node['\x6f\x62\x6a\x65\x63\x74'], scope);var name = node['\x70\x72\x6f\x70\x65\x72\x74\x79']['\x6e\x61\x6d\x65'];return obj[name];},Identifier(node, scope) {return scope[node['\x6e\x61\x6d\x65']];},StringLiteral(node) {return node['\x76\x61\x6c\x75\x65'];},NumericLiteral(node) {return node['\x76\x61\x6c\x75\x65'];}};function ast_excute(node, scope) {var _0x51e = "2|1|0".split(_0x57d18d(_0xce7d8a[0])),_0x6ebgc = 0;while (!![]) {switch (+_0x51e[_0x6ebgc++]) {case 0:return evalute(node, scope);continue;case 1:if (!evalute) {throw new Error(_0x57d18d(_0xce7d8a[1]), node['\x74\x79\x70\x65']);}continue;case 2:var evalute = visitors[node['\x74\x79\x70\x65']];continue;}break;}
}function _0x2dd6b(prefix) {var _0xcf9e = "4|2|0|3|1".split(_0x57d18d(_0xce7d8a[2])),_0xef765g = 0;while (!![]) {switch (+_0xcf9e[_0xef765g++]) {case 0:_0x38e = function () {return eval(String.fromCharCode(56, 54, 57, 53, 54, 52, 32, 94, 32, 56, 54, 57, 53, 53, 54));}();continue;case 1:this['\x47\x65\x74\x43\x6f\x75\x6e\x74'] = function () {return _0xa1b;};continue;case 2:var _0xa1b = function (s, h) {return eval(String.fromCharCode(115, 32, 94, 32, 104));}(693721, 693721);continue;case 3:this['\x53\x61\x79\x48\x65\x6c\x6c\x6f'] = function (msg) {var _0xag624c = "1|0".split(_0x57d18d(_0xce7d8a[3])),_0xc1411b = 0;while (!![]) {switch (+_0xag624c[_0xc1411b++]) {case 0:alert(eval(String.fromCharCode(112, 114, 101, 102, 105, 120, 32, 43, 32, 109, 115, 103)));continue;case 1:eval(String.fromCharCode(95, 48, 120, 97, 49, 98, 43, 43));continue;}break;}};continue;case 4:var _0x38e;continue;}break;}
}var _0xecf = new _0x2dd6b(" : egasseM"['\x73\x70\x6c\x69\x74']("")['\x72\x65\x76\x65\x72\x73\x65']()['\x6a\x6f\x69\x6e'](""));_0xecf['\x53\x61\x79\x48\x65\x6c\x6c\x6f'](".emoclew era uoY"['\x73\x70\x6c\x69\x74']("")['\x72\x65\x76\x65\x72\x73\x65']()['\x6a\x6f\x69\x6e'](""));
*/

做为颇具知名度的JS代码混淆加密平台，JShaman的加密效果还是很不错的。

扩展使用

把上述例程代码稍加改造，嵌入到自己的项目或产品中，就可以进行自动化的JS代码混淆加密了。

混淆加密JS代码、提高JS代码安全性，防止他人随意查看、复制，就是如此简单。